Privacy

For anything about your data, write to support@uarpie.app.

What we keep, and why

• Your email address, to sign you in (we email you a link or a code; there is no password) and to tell you about your apps and your bill.
• Your apps: the files you deploy and their settings, to build and run them. Settings are locked with a key held by Amazon Web Services that never leaves it. Build logs are deleted after 30 days.
• How your apps run: the time, memory and data each request uses, and the lines your app writes to its log, to count your plan's use and help you fix problems. Kept for 90 days. Your account's total use for each month is kept for about 13 months, so you can look back at what you used.
• Calls to outside services from apps nobody has kept yet, or that we have stopped from calling out: which app, the name and port of the service, when, and how much data moved. Kept for 30 days and used only to look into abuse. We never record what was sent. See acceptable use.
• Reports of errors in Uarpie itself: what failed, where in our code, and which request it was, whose address can name the app involved. They go to Sentry, which we use to find and fix problems. This website and your dashboard also send Sentry a report when something fails in your browser, and timing measurements from about one page view in ten.
• Visits to our public pages: which page, the site you came from, your country, and your browser, system and type of device, so we know which pages people read. Vercel counts them for us. It sets no cookies, and what it keeps does not say who you are. Your dashboard and the sign-in and claim pages are never counted.
• Payments are handled by Stripe. We never see or store your card number.
• Domains you buy through us: the name, address, phone number and email address a registration needs, locked like your settings and sent to Amazon Web Services, which registers the domain. Kept while the app the domain is for exists.
• Messages you send us, by email or through the contact form or your dashboard, so we can reply.
• Requests for us to build something: your answers about what you want, any pictures you add, your name, your email and your phone number if you give it, so we can quote and build it.

We use cookies only to keep you signed in and to let your devices open your private apps. We use no advertising or tracking cookies. Your dashboard also keeps your email address and the list of your apps in your browser, so it opens at once; both are cleared when you sign out.

The people who use your apps

When people use an app hosted on Uarpie, the app's owner decides what it collects about them. We store and process that information only to run the app.

When someone opens a private app after signing in through Uarpie, we tell the app who they are: their name if they have given one, their email address, an id that is the same in every app they use on Uarpie, and whether they own the app or were invited to it. The app can then greet them without a sign-in of its own.

When an owner offers an app in other languages, the words on its pages are sent to Anthropic, which translates them with its Claude models.

Businesses we write to

We look for small businesses with no website of their own on OpenStreetMap, a public map anyone can use (© OpenStreetMap contributors, under the Open Database License). From it we keep a business's name, kind of business, address, phone number, email address if the map lists one, and its opening hours and food if listed. We use these to make the business a free preview website on its own page, and to call it or post it a card about that preview. A business run by one person counts as a person under data protection law: we rely on our legitimate interest in offering our service to businesses, and keep no more than that needs.

A business can stop us at any time: tap “Stop” on its page, or write to support@uarpie.app. We then keep its record only so that we never contact it again, and its page no longer shows its details. Emails and texts only ever go to a business that asked for them. When a business emails us, we note the email's subject and who sent it on its record, and keep a copy of the email for 30 days.

Who else handles it

• Amazon Web Services runs your apps, stores their data, sends our email, receives copies of the emails businesses send us, and registers the domains you buy.
• Vercel runs this website and your dashboard, and counts visits to the public pages.
• Stripe takes payments.
• Stannp prints and posts our cards to businesses, and receives each card and the address it goes to.
• Sentry receives error reports and timing measurements, from Uarpie itself and from your browser.
• Google holds our email inbox: what you send to support@uarpie.app, and copies of the messages sent through the contact form or your dashboard.
• Anthropic translates the pages of apps whose owners offer other languages.

Your account, and your apps with their databases and files, are stored in the United States by Amazon Web Services. The other companies above may also store data in the United States. We rely on the safeguards they offer for data sent outside the UK.

How long we keep it

Your account stays while you have it. An app nobody keeps is deleted 7 days after it was put online.

When an app is deleted, its database, files, source and build logs are removed within the hour. A few copies take longer to go:

• the old copies we keep for undoing mistakes go within about 30 days;
• its database stays in our backups for up to 7 days;
• a copy of its build logs, and the records of its calls to outside services, stay until their 30 days are up;
• the records of how it ran stay until their 90 days are up.

When an app deletes or replaces a file, we keep the old copy for 30 days. If something is deleted by mistake, write to us within 30 days and we can put it back.

Each app's database is copied before every deploy that runs its migrations, and every day on paid plans. These copies are kept for 30 days. Our database backups, which include every app's database, are kept for 7 days, so deleted data can remain in a backup for up to 7 days.

Messages you send us are kept so we can answer them and follow up later. Ask, and we will delete them.

When someone asks for a sign-in code, on a private app's own page, on our page for opening a phone app, or in the Uarpie app on a phone, the address they typed is kept with the code and deleted about a day after the code runs out. If they sign in with it, their address is kept as part of their sign-in.

Your rights

You can delete any of your apps yourself, from your dashboard. You can also ask to see the information we hold about you, to correct it, to have it deleted, or to get a copy to take elsewhere. We do these by hand: write to support@uarpie.app and we will do it within a month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If we change this page in a way that matters, we will email everyone with an account.